Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/d8fd482c-2d90-3787-ab60-7d39f5859284.roa
File:                     d8fd482c-2d90-3787-ab60-7d39f5859284.roa (raw, json)
Hash identifier:          EDJd+FxRwofA6gjTWDOvj63bMRSjn24dxH8/a8G201Q=
Subject key identifier:   3C:9A:25:DF:72:D9:3C:AF:D8:D4:ED:B8:FF:34:20:A6:51:70:98:61
Certificate issuer:       /CN=e4bb5ad3-d823-4023-aace-329885f50c4b
Certificate serial:       010D0C9F432858450D858155DA6F650714662140
Authority key identifier: DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/d8fd482c-2d90-3787-ab60-7d39f5859284.roa
Signing time:             Thu 29 Feb 2024 14:00:31 +0000
ROA not before:           Thu 29 Feb 2024 14:00:31 +0000
ROA not after:            Wed 29 May 2024 13:00:31 +0000
asID:                     16509
IP address blocks:        169.150.104.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:0d:85:81:55:da:6f:65:07:14:66:21:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4bb5ad3-d823-4023-aace-329885f50c4b
        Validity
            Not Before: Feb 29 14:00:31 2024 GMT
            Not After : May 29 13:00:31 2024 GMT
        Subject: CN=f67ae70d-5776-4c8e-b390-85a9695d8924
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:b0:dd:cc:29:2a:de:bb:9b:a2:71:31:4d:21:
                    d7:77:81:e2:ec:e0:f6:eb:63:cc:6a:22:fb:ec:3c:
                    8c:fd:63:be:56:ac:77:77:90:12:06:b2:65:aa:13:
                    20:3d:d3:6a:47:7d:c1:c0:a1:9f:97:20:75:d6:37:
                    80:ed:f3:5f:5e:b6:4c:38:75:76:77:bc:79:59:b6:
                    dd:a4:54:a5:fe:09:ee:d7:9f:63:8e:84:2f:22:8b:
                    8a:55:f7:b6:d1:6a:34:ff:64:3d:35:c0:4d:9f:07:
                    8f:2c:96:bc:7a:1b:c6:4e:04:47:06:73:e9:14:67:
                    6f:bc:ee:d3:78:c4:30:81:8f:26:91:3f:12:18:5c:
                    e1:9e:c5:85:08:18:98:85:26:f0:e7:ea:87:bc:f2:
                    87:64:69:50:e5:06:75:25:ae:b8:f8:d9:81:96:53:
                    30:05:50:31:23:76:7c:9f:49:cb:41:92:20:44:7f:
                    7d:ad:d3:cb:59:af:3b:bf:8c:3c:cc:08:41:47:18:
                    0f:96:7a:a8:d6:03:76:07:3e:6a:d7:05:21:80:40:
                    30:66:91:1c:f4:55:af:98:9e:76:9e:d9:14:95:bc:
                    33:9f:15:72:4f:3a:88:3f:8a:38:40:dd:ab:44:29:
                    48:c8:73:4a:35:db:03:a0:14:9c:12:d9:24:4f:7d:
                    13:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:9A:25:DF:72:D9:3C:AF:D8:D4:ED:B8:FF:34:20:A6:51:70:98:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/d8fd482c-2d90-3787-ab60-7d39f5859284.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl

            X509v3 Authority Key Identifier:
                keyid:DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.150.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:f2:11:09:77:4f:f6:fb:09:df:61:5b:3c:5b:97:93:b3:99:
         d0:24:88:8a:59:b0:76:97:6e:28:a0:d3:1a:b6:86:e8:53:f3:
         85:69:31:02:7f:25:b6:3f:53:eb:e1:49:1d:68:b4:c5:8f:3e:
         37:28:39:cd:f5:01:aa:ff:61:dd:37:50:f0:9d:5a:a9:ff:71:
         1f:a6:0a:d1:d8:17:1b:fd:ad:9d:25:0d:05:05:d1:64:77:8a:
         c3:17:14:8c:97:45:55:ce:d1:5e:40:0b:e7:23:b5:f9:22:63:
         21:1f:cc:16:01:07:98:12:92:52:29:54:84:b4:0d:3c:cb:e3:
         c5:46:78:d8:08:b6:9d:d8:6e:07:cb:20:0e:4e:e0:2e:3b:18:
         a5:b2:4d:b8:98:e3:5e:c4:70:d9:bb:d8:43:8e:17:de:ef:8c:
         35:94:41:cd:16:9c:af:c9:42:60:3c:6b:e8:56:c3:63:44:de:
         c9:c7:f7:1f:70:72:62:f9:a8:4e:76:e5:47:be:f0:4d:b6:6c:
         98:01:80:03:80:df:67:c2:b2:66:79:f7:40:8d:9a:87:64:36:
         12:ad:db:50:c7:df:1b:7f:3a:24:4a:9f:eb:5f:bc:6f:dc:2e:
         0d:e3:08:56:17:c3:d2:ec:59:50:80:f5:5f:46:d0:93:47:02:
         34:8d:ac:94
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUNhYFV2m9lBxRmIUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTRiYjVhZDMtZDgyMy00MDIzLWFhY2UtMzI5ODg1ZjUw
YzRiMB4XDTI0MDIyOTE0MDAzMVoXDTI0MDUyOTEzMDAzMVowLzEtMCsGA1UEAxMk
ZjY3YWU3MGQtNTc3Ni00YzhlLWIzOTAtODVhOTY5NWQ4OTI0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgrDdzCkq3rubonExTSHXd4Hi7OD262PMaiL7
7DyM/WO+Vqx3d5ASBrJlqhMgPdNqR33BwKGflyB11jeA7fNfXrZMOHV2d7x5Wbbd
pFSl/gnu159jjoQvIouKVfe20Wo0/2Q9NcBNnwePLJa8ehvGTgRHBnPpFGdvvO7T
eMQwgY8mkT8SGFzhnsWFCBiYhSbw5+qHvPKHZGlQ5QZ1Ja64+NmBllMwBVAxI3Z8
n0nLQZIgRH99rdPLWa87v4w8zAhBRxgPlnqo1gN2Bz5q1wUhgEAwZpEc9FWvmJ52
ntkUlbwznxVyTzqIP4o4QN2rRClIyHNKNdsDoBScEtkkT30T9wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDyaJd9y2Tyv2NTtuP80IKZRcJhhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lNGJi
NWFkMy1kODIzLTQwMjMtYWFjZS0zMjk4ODVmNTBjNGIvZDhmZDQ4MmMtMmQ5MC0z
Nzg3LWFiNjAtN2QzOWY1ODU5Mjg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTRiYjVhZDMtZDgyMy00MDIzLWFh
Y2UtMzI5ODg1ZjUwYzRiL2U0YmI1YWQzLWQ4MjMtNDAyMy1hYWNlLTMyOTg4NWY1
MGM0Yi5jcmwwHwYDVR0jBBgwFoAU3GmquWZXzLwGDI5PbtsBK4FCf7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lNGJiNWFkMy1kODIzLTQwMjMtYWFjZS0zMjk4
ODVmNTBjNGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqZZoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGXyEQl3T/b7Cd9hWzxbl5OzmdAkiIpZsHaXbiig0xq2huhT84VpMQJ/
JbY/U+vhSR1otMWPPjcoOc31Aar/Yd03UPCdWqn/cR+mCtHYFxv9rZ0lDQUF0WR3
isMXFIyXRVXO0V5AC+cjtfkiYyEfzBYBB5gSklIpVIS0DTzL48VGeNgItp3YbgfL
IA5O4C47GKWyTbiY417EcNm72EOOF97vjDWUQc0WnK/JQmA8a+hWw2NE3snH9x9w
cmL5qE525Ue+8E22bJgBgAOA32fCsmZ590CNmodkNhKt21DH3xt/OiRKn+tfvG/c
Lg3jCFYXw9LsWVCA9V9G0JNHAjSNrJQ=
-----END CERTIFICATE-----
Generated at Fri May 3 01:53:30 2024 by rpki-client on console-fra.rpki-client.org